3 ms·
The worst part about that story to me is that you are storing your customers passwords in plaintext apparently? Is this common practice?
by version_five 5y ago
The worst part about that story to me is that you are storing your customers passwords in plaintext apparently? Is this common practice?
- aeyes 5y ago"logged their password", so my guess is that they did something like: if(login == competitor): print(password)
- version_five 5y agoOk understood. I guess it shows how much trust you are putting in an org by using their software, (and anecdotally how apparently willing people are to break that trust)
- Dylan16807 5y agoSort of. But trusting an organization not to look at your password shouldn't be something you ever need to do.
- pcthrowaway 5y agoAs a user, you should always assume incompetence/maliciousness and avoid password reuse. Password managers make this dead simple; You still have to trust someone (sort of, Bitwarden is open source), but it mitigates this attack elsewhere.
- throwaway7477 5y agoYes, that's what we did, then waited for their next login.